XFA Now Supports Keycloak

XFA has a new identity provider integration: Keycloak. Organizations that sign in through Keycloak can now check device posture on every login, with no MDM and no agent rollout, live in minutes.

Your login checks who is signing in. A password and an MFA code confirm the person, but say nothing about the laptop it runs on. XFA checks the device itself, at the moment of sign-in: safe devices get access, and a device that is out of policy is stopped with a clear message on what to fix. Privacy-respecting, and built for BYOD.

Set it up on the Enforcement page in the XFA Dashboard. The Keycloak enforcement guide has the steps.